AI Summary

Cybersecurity researchers identified a new version of the TrickMo Android banking trojan that uses The Open Network (TON) for command‑and‑control. ThreatFabric observed the variant between January and February 2026. It has been actively targeting banking and cryptocurrency wallet users in France, Italy, and Austria. The trojan’s use of TON and SOCKS5 enables it to pivot through Android networks. No further details on its capabilities or future actions were provided.

AI summaries can be wrong sometimes—always verify important details using the source article.